CyberRota Analysis
This is a high severity vulnerability with a CVSS score of 8.4. It affects Apache.
CVE
CVE-2023-45303
Severity
HIGH
CVSS
8.4
EPSS
0.86%
Apache
Original NVD Description
ThingsBoard before 3.5 allows Server-Side Template Injection if users are allowed to modify an email template, because Apache FreeMarker supports freemarker.template.utility.Execute (for content sent to the /api/admin/settings endpoint).
Related CVEs
Other vulnerabilities affecting the same vendor(s)